@depup/octokit__oauth-methods 6.0.2-depup.0

package/LICENSE

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) 2021 Octokit contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -0,0 +1,32 @@
+# @depup/octokit__oauth-methods
+
+> Dependency-bumped version of [@octokit/oauth-methods](https://www.npmjs.com/package/@octokit/oauth-methods)
+
+Generated by [DepUp](https://github.com/depup/npm) -- all production
+dependencies bumped to latest versions.
+
+## Installation
+
+```bash
+npm install @depup/octokit__oauth-methods
+```
+
+| Field | Value |
+|-------|-------|
+| Original | [@octokit/oauth-methods](https://www.npmjs.com/package/@octokit/oauth-methods) @ 6.0.2 |
+| Processed | 2026-03-17 |
+| Smoke test | passed |
+| Deps updated | 2 |
+
+## Dependency Changes
+
+| Dependency | From | To |
+|------------|------|-----|
+| @octokit/request | ^10.0.6 | ^10.0.8 |
+| @octokit/request-error | ^7.0.2 | ^7.1.0 |
+
+---
+
+Source: https://github.com/depup/npm | Original: https://www.npmjs.com/package/@octokit/oauth-methods
+
+License inherited from the original package.

package/changes.json

@@ -0,0 +1,14 @@
+{
+  "bumped": {
+    "@octokit/request": {
+      "from": "^10.0.6",
+      "to": "^10.0.8"
+    },
+    "@octokit/request-error": {
+      "from": "^7.0.2",
+      "to": "^7.1.0"
+    }
+  },
+  "timestamp": "2026-03-17T16:33:28.229Z",
+  "totalUpdated": 2
+}

package/dist-bundle/index.js

@@ -0,0 +1,317 @@
+// pkg/dist-src/version.js
+var VERSION = "0.0.0-development";
+
+// pkg/dist-src/get-web-flow-authorization-url.js
+import { oauthAuthorizationUrl } from "@octokit/oauth-authorization-url";
+import { request as defaultRequest } from "@octokit/request";
+
+// pkg/dist-src/utils.js
+import { RequestError } from "@octokit/request-error";
+function requestToOAuthBaseUrl(request) {
+  const endpointDefaults = request.endpoint.DEFAULTS;
+  return /^https:\/\/(api\.)?github\.com$/.test(endpointDefaults.baseUrl) ? "https://github.com" : endpointDefaults.baseUrl.replace("/api/v3", "");
+}
+async function oauthRequest(request, route, parameters) {
+  const withOAuthParameters = {
+    baseUrl: requestToOAuthBaseUrl(request),
+    headers: {
+      accept: "application/json"
+    },
+    ...parameters
+  };
+  const response = await request(route, withOAuthParameters);
+  if ("error" in response.data) {
+    const error = new RequestError(
+      `${response.data.error_description} (${response.data.error}, ${response.data.error_uri})`,
+      400,
+      {
+        request: request.endpoint.merge(
+          route,
+          withOAuthParameters
+        )
+      }
+    );
+    error.response = response;
+    throw error;
+  }
+  return response;
+}
+
+// pkg/dist-src/get-web-flow-authorization-url.js
+function getWebFlowAuthorizationUrl({
+  request = defaultRequest,
+  ...options
+}) {
+  const baseUrl = requestToOAuthBaseUrl(request);
+  return oauthAuthorizationUrl({
+    ...options,
+    baseUrl
+  });
+}
+
+// pkg/dist-src/exchange-web-flow-code.js
+import { request as defaultRequest2 } from "@octokit/request";
+async function exchangeWebFlowCode(options) {
+  const request = options.request || defaultRequest2;
+  const response = await oauthRequest(
+    request,
+    "POST /login/oauth/access_token",
+    {
+      client_id: options.clientId,
+      client_secret: options.clientSecret,
+      code: options.code,
+      redirect_uri: options.redirectUrl
+    }
+  );
+  const authentication = {
+    clientType: options.clientType,
+    clientId: options.clientId,
+    clientSecret: options.clientSecret,
+    token: response.data.access_token,
+    scopes: response.data.scope.split(/\s+/).filter(Boolean)
+  };
+  if (options.clientType === "github-app") {
+    if ("refresh_token" in response.data) {
+      const apiTimeInMs = new Date(response.headers.date).getTime();
+      authentication.refreshToken = response.data.refresh_token, authentication.expiresAt = toTimestamp(
+        apiTimeInMs,
+        response.data.expires_in
+      ), authentication.refreshTokenExpiresAt = toTimestamp(
+        apiTimeInMs,
+        response.data.refresh_token_expires_in
+      );
+    }
+    delete authentication.scopes;
+  }
+  return { ...response, authentication };
+}
+function toTimestamp(apiTimeInMs, expirationInSeconds) {
+  return new Date(apiTimeInMs + expirationInSeconds * 1e3).toISOString();
+}
+
+// pkg/dist-src/create-device-code.js
+import { request as defaultRequest3 } from "@octokit/request";
+async function createDeviceCode(options) {
+  const request = options.request || defaultRequest3;
+  const parameters = {
+    client_id: options.clientId
+  };
+  if ("scopes" in options && Array.isArray(options.scopes)) {
+    parameters.scope = options.scopes.join(" ");
+  }
+  return oauthRequest(request, "POST /login/device/code", parameters);
+}
+
+// pkg/dist-src/exchange-device-code.js
+import { request as defaultRequest4 } from "@octokit/request";
+async function exchangeDeviceCode(options) {
+  const request = options.request || defaultRequest4;
+  const response = await oauthRequest(
+    request,
+    "POST /login/oauth/access_token",
+    {
+      client_id: options.clientId,
+      device_code: options.code,
+      grant_type: "urn:ietf:params:oauth:grant-type:device_code"
+    }
+  );
+  const authentication = {
+    clientType: options.clientType,
+    clientId: options.clientId,
+    token: response.data.access_token,
+    scopes: response.data.scope.split(/\s+/).filter(Boolean)
+  };
+  if ("clientSecret" in options) {
+    authentication.clientSecret = options.clientSecret;
+  }
+  if (options.clientType === "github-app") {
+    if ("refresh_token" in response.data) {
+      const apiTimeInMs = new Date(response.headers.date).getTime();
+      authentication.refreshToken = response.data.refresh_token, authentication.expiresAt = toTimestamp2(
+        apiTimeInMs,
+        response.data.expires_in
+      ), authentication.refreshTokenExpiresAt = toTimestamp2(
+        apiTimeInMs,
+        response.data.refresh_token_expires_in
+      );
+    }
+    delete authentication.scopes;
+  }
+  return { ...response, authentication };
+}
+function toTimestamp2(apiTimeInMs, expirationInSeconds) {
+  return new Date(apiTimeInMs + expirationInSeconds * 1e3).toISOString();
+}
+
+// pkg/dist-src/check-token.js
+import { request as defaultRequest5 } from "@octokit/request";
+async function checkToken(options) {
+  const request = options.request || defaultRequest5;
+  const response = await request("POST /applications/{client_id}/token", {
+    headers: {
+      authorization: `basic ${btoa(
+        `${options.clientId}:${options.clientSecret}`
+      )}`
+    },
+    client_id: options.clientId,
+    access_token: options.token
+  });
+  const authentication = {
+    clientType: options.clientType,
+    clientId: options.clientId,
+    clientSecret: options.clientSecret,
+    token: options.token,
+    scopes: response.data.scopes
+  };
+  if (response.data.expires_at)
+    authentication.expiresAt = response.data.expires_at;
+  if (options.clientType === "github-app") {
+    delete authentication.scopes;
+  }
+  return { ...response, authentication };
+}
+
+// pkg/dist-src/refresh-token.js
+import { request as defaultRequest6 } from "@octokit/request";
+async function refreshToken(options) {
+  const request = options.request || defaultRequest6;
+  const response = await oauthRequest(
+    request,
+    "POST /login/oauth/access_token",
+    {
+      client_id: options.clientId,
+      client_secret: options.clientSecret,
+      grant_type: "refresh_token",
+      refresh_token: options.refreshToken
+    }
+  );
+  const apiTimeInMs = new Date(response.headers.date).getTime();
+  const authentication = {
+    clientType: "github-app",
+    clientId: options.clientId,
+    clientSecret: options.clientSecret,
+    token: response.data.access_token,
+    refreshToken: response.data.refresh_token,
+    expiresAt: toTimestamp3(apiTimeInMs, response.data.expires_in),
+    refreshTokenExpiresAt: toTimestamp3(
+      apiTimeInMs,
+      response.data.refresh_token_expires_in
+    )
+  };
+  return { ...response, authentication };
+}
+function toTimestamp3(apiTimeInMs, expirationInSeconds) {
+  return new Date(apiTimeInMs + expirationInSeconds * 1e3).toISOString();
+}
+
+// pkg/dist-src/scope-token.js
+import { request as defaultRequest7 } from "@octokit/request";
+async function scopeToken(options) {
+  const {
+    request: optionsRequest,
+    clientType,
+    clientId,
+    clientSecret,
+    token,
+    ...requestOptions
+  } = options;
+  const request = options.request || defaultRequest7;
+  const response = await request(
+    "POST /applications/{client_id}/token/scoped",
+    {
+      headers: {
+        authorization: `basic ${btoa(`${clientId}:${clientSecret}`)}`
+      },
+      client_id: clientId,
+      access_token: token,
+      ...requestOptions
+    }
+  );
+  const authentication = Object.assign(
+    {
+      clientType,
+      clientId,
+      clientSecret,
+      token: response.data.token
+    },
+    response.data.expires_at ? { expiresAt: response.data.expires_at } : {}
+  );
+  return { ...response, authentication };
+}
+
+// pkg/dist-src/reset-token.js
+import { request as defaultRequest8 } from "@octokit/request";
+async function resetToken(options) {
+  const request = options.request || defaultRequest8;
+  const auth = btoa(`${options.clientId}:${options.clientSecret}`);
+  const response = await request(
+    "PATCH /applications/{client_id}/token",
+    {
+      headers: {
+        authorization: `basic ${auth}`
+      },
+      client_id: options.clientId,
+      access_token: options.token
+    }
+  );
+  const authentication = {
+    clientType: options.clientType,
+    clientId: options.clientId,
+    clientSecret: options.clientSecret,
+    token: response.data.token,
+    scopes: response.data.scopes
+  };
+  if (response.data.expires_at)
+    authentication.expiresAt = response.data.expires_at;
+  if (options.clientType === "github-app") {
+    delete authentication.scopes;
+  }
+  return { ...response, authentication };
+}
+
+// pkg/dist-src/delete-token.js
+import { request as defaultRequest9 } from "@octokit/request";
+async function deleteToken(options) {
+  const request = options.request || defaultRequest9;
+  const auth = btoa(`${options.clientId}:${options.clientSecret}`);
+  return request(
+    "DELETE /applications/{client_id}/token",
+    {
+      headers: {
+        authorization: `basic ${auth}`
+      },
+      client_id: options.clientId,
+      access_token: options.token
+    }
+  );
+}
+
+// pkg/dist-src/delete-authorization.js
+import { request as defaultRequest10 } from "@octokit/request";
+async function deleteAuthorization(options) {
+  const request = options.request || defaultRequest10;
+  const auth = btoa(`${options.clientId}:${options.clientSecret}`);
+  return request(
+    "DELETE /applications/{client_id}/grant",
+    {
+      headers: {
+        authorization: `basic ${auth}`
+      },
+      client_id: options.clientId,
+      access_token: options.token
+    }
+  );
+}
+export {
+  VERSION,
+  checkToken,
+  createDeviceCode,
+  deleteAuthorization,
+  deleteToken,
+  exchangeDeviceCode,
+  exchangeWebFlowCode,
+  getWebFlowAuthorizationUrl,
+  refreshToken,
+  resetToken,
+  scopeToken
+};

package/dist-bundle/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../dist-src/version.js", "../dist-src/get-web-flow-authorization-url.js", "../dist-src/utils.js", "../dist-src/exchange-web-flow-code.js", "../dist-src/create-device-code.js", "../dist-src/exchange-device-code.js", "../dist-src/check-token.js", "../dist-src/refresh-token.js", "../dist-src/scope-token.js", "../dist-src/reset-token.js", "../dist-src/delete-token.js", "../dist-src/delete-authorization.js"],
+  "sourcesContent": ["const VERSION = \"0.0.0-development\";\nexport {\n  VERSION\n};\n", "import { oauthAuthorizationUrl } from \"@octokit/oauth-authorization-url\";\nimport { request as defaultRequest } from \"@octokit/request\";\nimport { requestToOAuthBaseUrl } from \"./utils.js\";\nfunction getWebFlowAuthorizationUrl({\n  request = defaultRequest,\n  ...options\n}) {\n  const baseUrl = requestToOAuthBaseUrl(request);\n  return oauthAuthorizationUrl({\n    ...options,\n    baseUrl\n  });\n}\nexport {\n  getWebFlowAuthorizationUrl\n};\n", "import { RequestError } from \"@octokit/request-error\";\nfunction requestToOAuthBaseUrl(request) {\n  const endpointDefaults = request.endpoint.DEFAULTS;\n  return /^https:\\/\\/(api\\.)?github\\.com$/.test(endpointDefaults.baseUrl) ? \"https://github.com\" : endpointDefaults.baseUrl.replace(\"/api/v3\", \"\");\n}\nasync function oauthRequest(request, route, parameters) {\n  const withOAuthParameters = {\n    baseUrl: requestToOAuthBaseUrl(request),\n    headers: {\n      accept: \"application/json\"\n    },\n    ...parameters\n  };\n  const response = await request(route, withOAuthParameters);\n  if (\"error\" in response.data) {\n    const error = new RequestError(\n      `${response.data.error_description} (${response.data.error}, ${response.data.error_uri})`,\n      400,\n      {\n        request: request.endpoint.merge(\n          route,\n          withOAuthParameters\n        )\n      }\n    );\n    error.response = response;\n    throw error;\n  }\n  return response;\n}\nexport {\n  oauthRequest,\n  requestToOAuthBaseUrl\n};\n", "import { request as defaultRequest } from \"@octokit/request\";\nimport { oauthRequest } from \"./utils.js\";\nasync function exchangeWebFlowCode(options) {\n  const request = options.request || defaultRequest;\n  const response = await oauthRequest(\n    request,\n    \"POST /login/oauth/access_token\",\n    {\n      client_id: options.clientId,\n      client_secret: options.clientSecret,\n      code: options.code,\n      redirect_uri: options.redirectUrl\n    }\n  );\n  const authentication = {\n    clientType: options.clientType,\n    clientId: options.clientId,\n    clientSecret: options.clientSecret,\n    token: response.data.access_token,\n    scopes: response.data.scope.split(/\\s+/).filter(Boolean)\n  };\n  if (options.clientType === \"github-app\") {\n    if (\"refresh_token\" in response.data) {\n      const apiTimeInMs = new Date(response.headers.date).getTime();\n      authentication.refreshToken = response.data.refresh_token, authentication.expiresAt = toTimestamp(\n        apiTimeInMs,\n        response.data.expires_in\n      ), authentication.refreshTokenExpiresAt = toTimestamp(\n        apiTimeInMs,\n        response.data.refresh_token_expires_in\n      );\n    }\n    delete authentication.scopes;\n  }\n  return { ...response, authentication };\n}\nfunction toTimestamp(apiTimeInMs, expirationInSeconds) {\n  return new Date(apiTimeInMs + expirationInSeconds * 1e3).toISOString();\n}\nexport {\n  exchangeWebFlowCode\n};\n", "import { request as defaultRequest } from \"@octokit/request\";\nimport { oauthRequest } from \"./utils.js\";\nasync function createDeviceCode(options) {\n  const request = options.request || defaultRequest;\n  const parameters = {\n    client_id: options.clientId\n  };\n  if (\"scopes\" in options && Array.isArray(options.scopes)) {\n    parameters.scope = options.scopes.join(\" \");\n  }\n  return oauthRequest(request, \"POST /login/device/code\", parameters);\n}\nexport {\n  createDeviceCode\n};\n", "import { request as defaultRequest } from \"@octokit/request\";\nimport { oauthRequest } from \"./utils.js\";\nasync function exchangeDeviceCode(options) {\n  const request = options.request || defaultRequest;\n  const response = await oauthRequest(\n    request,\n    \"POST /login/oauth/access_token\",\n    {\n      client_id: options.clientId,\n      device_code: options.code,\n      grant_type: \"urn:ietf:params:oauth:grant-type:device_code\"\n    }\n  );\n  const authentication = {\n    clientType: options.clientType,\n    clientId: options.clientId,\n    token: response.data.access_token,\n    scopes: response.data.scope.split(/\\s+/).filter(Boolean)\n  };\n  if (\"clientSecret\" in options) {\n    authentication.clientSecret = options.clientSecret;\n  }\n  if (options.clientType === \"github-app\") {\n    if (\"refresh_token\" in response.data) {\n      const apiTimeInMs = new Date(response.headers.date).getTime();\n      authentication.refreshToken = response.data.refresh_token, authentication.expiresAt = toTimestamp(\n        apiTimeInMs,\n        response.data.expires_in\n      ), authentication.refreshTokenExpiresAt = toTimestamp(\n        apiTimeInMs,\n        response.data.refresh_token_expires_in\n      );\n    }\n    delete authentication.scopes;\n  }\n  return { ...response, authentication };\n}\nfunction toTimestamp(apiTimeInMs, expirationInSeconds) {\n  return new Date(apiTimeInMs + expirationInSeconds * 1e3).toISOString();\n}\nexport {\n  exchangeDeviceCode\n};\n", "import { request as defaultRequest } from \"@octokit/request\";\nasync function checkToken(options) {\n  const request = options.request || defaultRequest;\n  const response = await request(\"POST /applications/{client_id}/token\", {\n    headers: {\n      authorization: `basic ${btoa(\n        `${options.clientId}:${options.clientSecret}`\n      )}`\n    },\n    client_id: options.clientId,\n    access_token: options.token\n  });\n  const authentication = {\n    clientType: options.clientType,\n    clientId: options.clientId,\n    clientSecret: options.clientSecret,\n    token: options.token,\n    scopes: response.data.scopes\n  };\n  if (response.data.expires_at)\n    authentication.expiresAt = response.data.expires_at;\n  if (options.clientType === \"github-app\") {\n    delete authentication.scopes;\n  }\n  return { ...response, authentication };\n}\nexport {\n  checkToken\n};\n", "import { request as defaultRequest } from \"@octokit/request\";\nimport { oauthRequest } from \"./utils.js\";\nasync function refreshToken(options) {\n  const request = options.request || defaultRequest;\n  const response = await oauthRequest(\n    request,\n    \"POST /login/oauth/access_token\",\n    {\n      client_id: options.clientId,\n      client_secret: options.clientSecret,\n      grant_type: \"refresh_token\",\n      refresh_token: options.refreshToken\n    }\n  );\n  const apiTimeInMs = new Date(response.headers.date).getTime();\n  const authentication = {\n    clientType: \"github-app\",\n    clientId: options.clientId,\n    clientSecret: options.clientSecret,\n    token: response.data.access_token,\n    refreshToken: response.data.refresh_token,\n    expiresAt: toTimestamp(apiTimeInMs, response.data.expires_in),\n    refreshTokenExpiresAt: toTimestamp(\n      apiTimeInMs,\n      response.data.refresh_token_expires_in\n    )\n  };\n  return { ...response, authentication };\n}\nfunction toTimestamp(apiTimeInMs, expirationInSeconds) {\n  return new Date(apiTimeInMs + expirationInSeconds * 1e3).toISOString();\n}\nexport {\n  refreshToken\n};\n", "import { request as defaultRequest } from \"@octokit/request\";\nasync function scopeToken(options) {\n  const {\n    request: optionsRequest,\n    clientType,\n    clientId,\n    clientSecret,\n    token,\n    ...requestOptions\n  } = options;\n  const request = options.request || defaultRequest;\n  const response = await request(\n    \"POST /applications/{client_id}/token/scoped\",\n    {\n      headers: {\n        authorization: `basic ${btoa(`${clientId}:${clientSecret}`)}`\n      },\n      client_id: clientId,\n      access_token: token,\n      ...requestOptions\n    }\n  );\n  const authentication = Object.assign(\n    {\n      clientType,\n      clientId,\n      clientSecret,\n      token: response.data.token\n    },\n    response.data.expires_at ? { expiresAt: response.data.expires_at } : {}\n  );\n  return { ...response, authentication };\n}\nexport {\n  scopeToken\n};\n", "import { request as defaultRequest } from \"@octokit/request\";\nasync function resetToken(options) {\n  const request = options.request || defaultRequest;\n  const auth = btoa(`${options.clientId}:${options.clientSecret}`);\n  const response = await request(\n    \"PATCH /applications/{client_id}/token\",\n    {\n      headers: {\n        authorization: `basic ${auth}`\n      },\n      client_id: options.clientId,\n      access_token: options.token\n    }\n  );\n  const authentication = {\n    clientType: options.clientType,\n    clientId: options.clientId,\n    clientSecret: options.clientSecret,\n    token: response.data.token,\n    scopes: response.data.scopes\n  };\n  if (response.data.expires_at)\n    authentication.expiresAt = response.data.expires_at;\n  if (options.clientType === \"github-app\") {\n    delete authentication.scopes;\n  }\n  return { ...response, authentication };\n}\nexport {\n  resetToken\n};\n", "import { request as defaultRequest } from \"@octokit/request\";\nasync function deleteToken(options) {\n  const request = options.request || defaultRequest;\n  const auth = btoa(`${options.clientId}:${options.clientSecret}`);\n  return request(\n    \"DELETE /applications/{client_id}/token\",\n    {\n      headers: {\n        authorization: `basic ${auth}`\n      },\n      client_id: options.clientId,\n      access_token: options.token\n    }\n  );\n}\nexport {\n  deleteToken\n};\n", "import { request as defaultRequest } from \"@octokit/request\";\nasync function deleteAuthorization(options) {\n  const request = options.request || defaultRequest;\n  const auth = btoa(`${options.clientId}:${options.clientSecret}`);\n  return request(\n    \"DELETE /applications/{client_id}/grant\",\n    {\n      headers: {\n        authorization: `basic ${auth}`\n      },\n      client_id: options.clientId,\n      access_token: options.token\n    }\n  );\n}\nexport {\n  deleteAuthorization\n};\n"],
+  "mappings": ";AAAA,IAAM,UAAU;;;ACAhB,SAAS,6BAA6B;AACtC,SAAS,WAAW,sBAAsB;;;ACD1C,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB,SAAS;AACtC,QAAM,mBAAmB,QAAQ,SAAS;AAC1C,SAAO,kCAAkC,KAAK,iBAAiB,OAAO,IAAI,uBAAuB,iBAAiB,QAAQ,QAAQ,WAAW,EAAE;AACjJ;AACA,eAAe,aAAa,SAAS,OAAO,YAAY;AACtD,QAAM,sBAAsB;AAAA,IAC1B,SAAS,sBAAsB,OAAO;AAAA,IACtC,SAAS;AAAA,MACP,QAAQ;AAAA,IACV;AAAA,IACA,GAAG;AAAA,EACL;AACA,QAAM,WAAW,MAAM,QAAQ,OAAO,mBAAmB;AACzD,MAAI,WAAW,SAAS,MAAM;AAC5B,UAAM,QAAQ,IAAI;AAAA,MAChB,GAAG,SAAS,KAAK,iBAAiB,KAAK,SAAS,KAAK,KAAK,KAAK,SAAS,KAAK,SAAS;AAAA,MACtF;AAAA,MACA;AAAA,QACE,SAAS,QAAQ,SAAS;AAAA,UACxB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,UAAM,WAAW;AACjB,UAAM;AAAA,EACR;AACA,SAAO;AACT;;;AD1BA,SAAS,2BAA2B;AAAA,EAClC,UAAU;AAAA,EACV,GAAG;AACL,GAAG;AACD,QAAM,UAAU,sBAAsB,OAAO;AAC7C,SAAO,sBAAsB;AAAA,IAC3B,GAAG;AAAA,IACH;AAAA,EACF,CAAC;AACH;;;AEZA,SAAS,WAAWA,uBAAsB;AAE1C,eAAe,oBAAoB,SAAS;AAC1C,QAAM,UAAU,QAAQ,WAAWC;AACnC,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,WAAW,QAAQ;AAAA,MACnB,eAAe,QAAQ;AAAA,MACvB,MAAM,QAAQ;AAAA,MACd,cAAc,QAAQ;AAAA,IACxB;AAAA,EACF;AACA,QAAM,iBAAiB;AAAA,IACrB,YAAY,QAAQ;AAAA,IACpB,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ;AAAA,IACtB,OAAO,SAAS,KAAK;AAAA,IACrB,QAAQ,SAAS,KAAK,MAAM,MAAM,KAAK,EAAE,OAAO,OAAO;AAAA,EACzD;AACA,MAAI,QAAQ,eAAe,cAAc;AACvC,QAAI,mBAAmB,SAAS,MAAM;AACpC,YAAM,cAAc,IAAI,KAAK,SAAS,QAAQ,IAAI,EAAE,QAAQ;AAC5D,qBAAe,eAAe,SAAS,KAAK,eAAe,eAAe,YAAY;AAAA,QACpF;AAAA,QACA,SAAS,KAAK;AAAA,MAChB,GAAG,eAAe,wBAAwB;AAAA,QACxC;AAAA,QACA,SAAS,KAAK;AAAA,MAChB;AAAA,IACF;AACA,WAAO,eAAe;AAAA,EACxB;AACA,SAAO,EAAE,GAAG,UAAU,eAAe;AACvC;AACA,SAAS,YAAY,aAAa,qBAAqB;AACrD,SAAO,IAAI,KAAK,cAAc,sBAAsB,GAAG,EAAE,YAAY;AACvE;;;ACtCA,SAAS,WAAWC,uBAAsB;AAE1C,eAAe,iBAAiB,SAAS;AACvC,QAAM,UAAU,QAAQ,WAAWC;AACnC,QAAM,aAAa;AAAA,IACjB,WAAW,QAAQ;AAAA,EACrB;AACA,MAAI,YAAY,WAAW,MAAM,QAAQ,QAAQ,MAAM,GAAG;AACxD,eAAW,QAAQ,QAAQ,OAAO,KAAK,GAAG;AAAA,EAC5C;AACA,SAAO,aAAa,SAAS,2BAA2B,UAAU;AACpE;;;ACXA,SAAS,WAAWC,uBAAsB;AAE1C,eAAe,mBAAmB,SAAS;AACzC,QAAM,UAAU,QAAQ,WAAWC;AACnC,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,WAAW,QAAQ;AAAA,MACnB,aAAa,QAAQ;AAAA,MACrB,YAAY;AAAA,IACd;AAAA,EACF;AACA,QAAM,iBAAiB;AAAA,IACrB,YAAY,QAAQ;AAAA,IACpB,UAAU,QAAQ;AAAA,IAClB,OAAO,SAAS,KAAK;AAAA,IACrB,QAAQ,SAAS,KAAK,MAAM,MAAM,KAAK,EAAE,OAAO,OAAO;AAAA,EACzD;AACA,MAAI,kBAAkB,SAAS;AAC7B,mBAAe,eAAe,QAAQ;AAAA,EACxC;AACA,MAAI,QAAQ,eAAe,cAAc;AACvC,QAAI,mBAAmB,SAAS,MAAM;AACpC,YAAM,cAAc,IAAI,KAAK,SAAS,QAAQ,IAAI,EAAE,QAAQ;AAC5D,qBAAe,eAAe,SAAS,KAAK,eAAe,eAAe,YAAYC;AAAA,QACpF;AAAA,QACA,SAAS,KAAK;AAAA,MAChB,GAAG,eAAe,wBAAwBA;AAAA,QACxC;AAAA,QACA,SAAS,KAAK;AAAA,MAChB;AAAA,IACF;AACA,WAAO,eAAe;AAAA,EACxB;AACA,SAAO,EAAE,GAAG,UAAU,eAAe;AACvC;AACA,SAASA,aAAY,aAAa,qBAAqB;AACrD,SAAO,IAAI,KAAK,cAAc,sBAAsB,GAAG,EAAE,YAAY;AACvE;;;ACvCA,SAAS,WAAWC,uBAAsB;AAC1C,eAAe,WAAW,SAAS;AACjC,QAAM,UAAU,QAAQ,WAAWA;AACnC,QAAM,WAAW,MAAM,QAAQ,wCAAwC;AAAA,IACrE,SAAS;AAAA,MACP,eAAe,SAAS;AAAA,QACtB,GAAG,QAAQ,QAAQ,IAAI,QAAQ,YAAY;AAAA,MAC7C,CAAC;AAAA,IACH;AAAA,IACA,WAAW,QAAQ;AAAA,IACnB,cAAc,QAAQ;AAAA,EACxB,CAAC;AACD,QAAM,iBAAiB;AAAA,IACrB,YAAY,QAAQ;AAAA,IACpB,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ;AAAA,IACtB,OAAO,QAAQ;AAAA,IACf,QAAQ,SAAS,KAAK;AAAA,EACxB;AACA,MAAI,SAAS,KAAK;AAChB,mBAAe,YAAY,SAAS,KAAK;AAC3C,MAAI,QAAQ,eAAe,cAAc;AACvC,WAAO,eAAe;AAAA,EACxB;AACA,SAAO,EAAE,GAAG,UAAU,eAAe;AACvC;;;ACzBA,SAAS,WAAWC,uBAAsB;AAE1C,eAAe,aAAa,SAAS;AACnC,QAAM,UAAU,QAAQ,WAAWC;AACnC,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,WAAW,QAAQ;AAAA,MACnB,eAAe,QAAQ;AAAA,MACvB,YAAY;AAAA,MACZ,eAAe,QAAQ;AAAA,IACzB;AAAA,EACF;AACA,QAAM,cAAc,IAAI,KAAK,SAAS,QAAQ,IAAI,EAAE,QAAQ;AAC5D,QAAM,iBAAiB;AAAA,IACrB,YAAY;AAAA,IACZ,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ;AAAA,IACtB,OAAO,SAAS,KAAK;AAAA,IACrB,cAAc,SAAS,KAAK;AAAA,IAC5B,WAAWC,aAAY,aAAa,SAAS,KAAK,UAAU;AAAA,IAC5D,uBAAuBA;AAAA,MACrB;AAAA,MACA,SAAS,KAAK;AAAA,IAChB;AAAA,EACF;AACA,SAAO,EAAE,GAAG,UAAU,eAAe;AACvC;AACA,SAASA,aAAY,aAAa,qBAAqB;AACrD,SAAO,IAAI,KAAK,cAAc,sBAAsB,GAAG,EAAE,YAAY;AACvE;;;AC/BA,SAAS,WAAWC,uBAAsB;AAC1C,eAAe,WAAW,SAAS;AACjC,QAAM;AAAA,IACJ,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EACL,IAAI;AACJ,QAAM,UAAU,QAAQ,WAAWA;AACnC,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,MACE,SAAS;AAAA,QACP,eAAe,SAAS,KAAK,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC;AAAA,MAC7D;AAAA,MACA,WAAW;AAAA,MACX,cAAc;AAAA,MACd,GAAG;AAAA,IACL;AAAA,EACF;AACA,QAAM,iBAAiB,OAAO;AAAA,IAC5B;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,SAAS,KAAK;AAAA,IACvB;AAAA,IACA,SAAS,KAAK,aAAa,EAAE,WAAW,SAAS,KAAK,WAAW,IAAI,CAAC;AAAA,EACxE;AACA,SAAO,EAAE,GAAG,UAAU,eAAe;AACvC;;;AChCA,SAAS,WAAWC,uBAAsB;AAC1C,eAAe,WAAW,SAAS;AACjC,QAAM,UAAU,QAAQ,WAAWA;AACnC,QAAM,OAAO,KAAK,GAAG,QAAQ,QAAQ,IAAI,QAAQ,YAAY,EAAE;AAC/D,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,MACE,SAAS;AAAA,QACP,eAAe,SAAS,IAAI;AAAA,MAC9B;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,cAAc,QAAQ;AAAA,IACxB;AAAA,EACF;AACA,QAAM,iBAAiB;AAAA,IACrB,YAAY,QAAQ;AAAA,IACpB,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ;AAAA,IACtB,OAAO,SAAS,KAAK;AAAA,IACrB,QAAQ,SAAS,KAAK;AAAA,EACxB;AACA,MAAI,SAAS,KAAK;AAChB,mBAAe,YAAY,SAAS,KAAK;AAC3C,MAAI,QAAQ,eAAe,cAAc;AACvC,WAAO,eAAe;AAAA,EACxB;AACA,SAAO,EAAE,GAAG,UAAU,eAAe;AACvC;;;AC3BA,SAAS,WAAWC,uBAAsB;AAC1C,eAAe,YAAY,SAAS;AAClC,QAAM,UAAU,QAAQ,WAAWA;AACnC,QAAM,OAAO,KAAK,GAAG,QAAQ,QAAQ,IAAI,QAAQ,YAAY,EAAE;AAC/D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,SAAS;AAAA,QACP,eAAe,SAAS,IAAI;AAAA,MAC9B;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,cAAc,QAAQ;AAAA,IACxB;AAAA,EACF;AACF;;;ACdA,SAAS,WAAWC,wBAAsB;AAC1C,eAAe,oBAAoB,SAAS;AAC1C,QAAM,UAAU,QAAQ,WAAWA;AACnC,QAAM,OAAO,KAAK,GAAG,QAAQ,QAAQ,IAAI,QAAQ,YAAY,EAAE;AAC/D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,SAAS;AAAA,QACP,eAAe,SAAS,IAAI;AAAA,MAC9B;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,cAAc,QAAQ;AAAA,IACxB;AAAA,EACF;AACF;",
+  "names": ["defaultRequest", "defaultRequest", "defaultRequest", "defaultRequest", "defaultRequest", "defaultRequest", "toTimestamp", "defaultRequest", "defaultRequest", "defaultRequest", "toTimestamp", "defaultRequest", "defaultRequest", "defaultRequest", "defaultRequest"]
+}

package/dist-src/check-token.js

@@ -0,0 +1,29 @@
+import { request as defaultRequest } from "@octokit/request";
+async function checkToken(options) {
+  const request = options.request || defaultRequest;
+  const response = await request("POST /applications/{client_id}/token", {
+    headers: {
+      authorization: `basic ${btoa(
+        `${options.clientId}:${options.clientSecret}`
+      )}`
+    },
+    client_id: options.clientId,
+    access_token: options.token
+  });
+  const authentication = {
+    clientType: options.clientType,
+    clientId: options.clientId,
+    clientSecret: options.clientSecret,
+    token: options.token,
+    scopes: response.data.scopes
+  };
+  if (response.data.expires_at)
+    authentication.expiresAt = response.data.expires_at;
+  if (options.clientType === "github-app") {
+    delete authentication.scopes;
+  }
+  return { ...response, authentication };
+}
+export {
+  checkToken
+};

package/dist-src/create-device-code.js

@@ -0,0 +1,15 @@
+import { request as defaultRequest } from "@octokit/request";
+import { oauthRequest } from "./utils.js";
+async function createDeviceCode(options) {
+  const request = options.request || defaultRequest;
+  const parameters = {
+    client_id: options.clientId
+  };
+  if ("scopes" in options && Array.isArray(options.scopes)) {
+    parameters.scope = options.scopes.join(" ");
+  }
+  return oauthRequest(request, "POST /login/device/code", parameters);
+}
+export {
+  createDeviceCode
+};

package/dist-src/delete-authorization.js

@@ -0,0 +1,18 @@
+import { request as defaultRequest } from "@octokit/request";
+async function deleteAuthorization(options) {
+  const request = options.request || defaultRequest;
+  const auth = btoa(`${options.clientId}:${options.clientSecret}`);
+  return request(
+    "DELETE /applications/{client_id}/grant",
+    {
+      headers: {
+        authorization: `basic ${auth}`
+      },
+      client_id: options.clientId,
+      access_token: options.token
+    }
+  );
+}
+export {
+  deleteAuthorization
+};

package/dist-src/delete-token.js

@@ -0,0 +1,18 @@
+import { request as defaultRequest } from "@octokit/request";
+async function deleteToken(options) {
+  const request = options.request || defaultRequest;
+  const auth = btoa(`${options.clientId}:${options.clientSecret}`);
+  return request(
+    "DELETE /applications/{client_id}/token",
+    {
+      headers: {
+        authorization: `basic ${auth}`
+      },
+      client_id: options.clientId,
+      access_token: options.token
+    }
+  );
+}
+export {
+  deleteToken
+};

package/dist-src/exchange-device-code.js

@@ -0,0 +1,43 @@
+import { request as defaultRequest } from "@octokit/request";
+import { oauthRequest } from "./utils.js";
+async function exchangeDeviceCode(options) {
+  const request = options.request || defaultRequest;
+  const response = await oauthRequest(
+    request,
+    "POST /login/oauth/access_token",
+    {
+      client_id: options.clientId,
+      device_code: options.code,
+      grant_type: "urn:ietf:params:oauth:grant-type:device_code"
+    }
+  );
+  const authentication = {
+    clientType: options.clientType,
+    clientId: options.clientId,
+    token: response.data.access_token,
+    scopes: response.data.scope.split(/\s+/).filter(Boolean)
+  };
+  if ("clientSecret" in options) {
+    authentication.clientSecret = options.clientSecret;
+  }
+  if (options.clientType === "github-app") {
+    if ("refresh_token" in response.data) {
+      const apiTimeInMs = new Date(response.headers.date).getTime();
+      authentication.refreshToken = response.data.refresh_token, authentication.expiresAt = toTimestamp(
+        apiTimeInMs,
+        response.data.expires_in
+      ), authentication.refreshTokenExpiresAt = toTimestamp(
+        apiTimeInMs,
+        response.data.refresh_token_expires_in
+      );
+    }
+    delete authentication.scopes;
+  }
+  return { ...response, authentication };
+}
+function toTimestamp(apiTimeInMs, expirationInSeconds) {
+  return new Date(apiTimeInMs + expirationInSeconds * 1e3).toISOString();
+}
+export {
+  exchangeDeviceCode
+};

package/dist-src/exchange-web-flow-code.js

@@ -0,0 +1,42 @@
+import { request as defaultRequest } from "@octokit/request";
+import { oauthRequest } from "./utils.js";
+async function exchangeWebFlowCode(options) {
+  const request = options.request || defaultRequest;
+  const response = await oauthRequest(
+    request,
+    "POST /login/oauth/access_token",
+    {
+      client_id: options.clientId,
+      client_secret: options.clientSecret,
+      code: options.code,
+      redirect_uri: options.redirectUrl
+    }
+  );
+  const authentication = {
+    clientType: options.clientType,
+    clientId: options.clientId,
+    clientSecret: options.clientSecret,
+    token: response.data.access_token,
+    scopes: response.data.scope.split(/\s+/).filter(Boolean)
+  };
+  if (options.clientType === "github-app") {
+    if ("refresh_token" in response.data) {
+      const apiTimeInMs = new Date(response.headers.date).getTime();
+      authentication.refreshToken = response.data.refresh_token, authentication.expiresAt = toTimestamp(
+        apiTimeInMs,
+        response.data.expires_in
+      ), authentication.refreshTokenExpiresAt = toTimestamp(
+        apiTimeInMs,
+        response.data.refresh_token_expires_in
+      );
+    }
+    delete authentication.scopes;
+  }
+  return { ...response, authentication };
+}
+function toTimestamp(apiTimeInMs, expirationInSeconds) {
+  return new Date(apiTimeInMs + expirationInSeconds * 1e3).toISOString();
+}
+export {
+  exchangeWebFlowCode
+};

package/dist-src/get-web-flow-authorization-url.js

@@ -0,0 +1,16 @@
+import { oauthAuthorizationUrl } from "@octokit/oauth-authorization-url";
+import { request as defaultRequest } from "@octokit/request";
+import { requestToOAuthBaseUrl } from "./utils.js";
+function getWebFlowAuthorizationUrl({
+  request = defaultRequest,
+  ...options
+}) {
+  const baseUrl = requestToOAuthBaseUrl(request);
+  return oauthAuthorizationUrl({
+    ...options,
+    baseUrl
+  });
+}
+export {
+  getWebFlowAuthorizationUrl
+};

package/dist-src/index.js

@@ -0,0 +1,14 @@
+import { VERSION } from "./version.js";
+export * from "./get-web-flow-authorization-url.js";
+export * from "./exchange-web-flow-code.js";
+export * from "./create-device-code.js";
+export * from "./exchange-device-code.js";
+export * from "./check-token.js";
+export * from "./refresh-token.js";
+export * from "./scope-token.js";
+export * from "./reset-token.js";
+export * from "./delete-token.js";
+export * from "./delete-authorization.js";
+export {
+  VERSION
+};

package/dist-src/refresh-token.js

@@ -0,0 +1,35 @@
+import { request as defaultRequest } from "@octokit/request";
+import { oauthRequest } from "./utils.js";
+async function refreshToken(options) {
+  const request = options.request || defaultRequest;
+  const response = await oauthRequest(
+    request,
+    "POST /login/oauth/access_token",
+    {
+      client_id: options.clientId,
+      client_secret: options.clientSecret,
+      grant_type: "refresh_token",
+      refresh_token: options.refreshToken
+    }
+  );
+  const apiTimeInMs = new Date(response.headers.date).getTime();
+  const authentication = {
+    clientType: "github-app",
+    clientId: options.clientId,
+    clientSecret: options.clientSecret,
+    token: response.data.access_token,
+    refreshToken: response.data.refresh_token,
+    expiresAt: toTimestamp(apiTimeInMs, response.data.expires_in),
+    refreshTokenExpiresAt: toTimestamp(
+      apiTimeInMs,
+      response.data.refresh_token_expires_in
+    )
+  };
+  return { ...response, authentication };
+}
+function toTimestamp(apiTimeInMs, expirationInSeconds) {
+  return new Date(apiTimeInMs + expirationInSeconds * 1e3).toISOString();
+}
+export {
+  refreshToken
+};

package/dist-src/reset-token.js

@@ -0,0 +1,31 @@
+import { request as defaultRequest } from "@octokit/request";
+async function resetToken(options) {
+  const request = options.request || defaultRequest;
+  const auth = btoa(`${options.clientId}:${options.clientSecret}`);
+  const response = await request(
+    "PATCH /applications/{client_id}/token",
+    {
+      headers: {
+        authorization: `basic ${auth}`
+      },
+      client_id: options.clientId,
+      access_token: options.token
+    }
+  );
+  const authentication = {
+    clientType: options.clientType,
+    clientId: options.clientId,
+    clientSecret: options.clientSecret,
+    token: response.data.token,
+    scopes: response.data.scopes
+  };
+  if (response.data.expires_at)
+    authentication.expiresAt = response.data.expires_at;
+  if (options.clientType === "github-app") {
+    delete authentication.scopes;
+  }
+  return { ...response, authentication };
+}
+export {
+  resetToken
+};

package/dist-src/scope-token.js

@@ -0,0 +1,36 @@
+import { request as defaultRequest } from "@octokit/request";
+async function scopeToken(options) {
+  const {
+    request: optionsRequest,
+    clientType,
+    clientId,
+    clientSecret,
+    token,
+    ...requestOptions
+  } = options;
+  const request = options.request || defaultRequest;
+  const response = await request(
+    "POST /applications/{client_id}/token/scoped",
+    {
+      headers: {
+        authorization: `basic ${btoa(`${clientId}:${clientSecret}`)}`
+      },
+      client_id: clientId,
+      access_token: token,
+      ...requestOptions
+    }
+  );
+  const authentication = Object.assign(
+    {
+      clientType,
+      clientId,
+      clientSecret,
+      token: response.data.token
+    },
+    response.data.expires_at ? { expiresAt: response.data.expires_at } : {}
+  );
+  return { ...response, authentication };
+}
+export {
+  scopeToken
+};

package/dist-src/utils.js

@@ -0,0 +1,34 @@
+import { RequestError } from "@octokit/request-error";
+function requestToOAuthBaseUrl(request) {
+  const endpointDefaults = request.endpoint.DEFAULTS;
+  return /^https:\/\/(api\.)?github\.com$/.test(endpointDefaults.baseUrl) ? "https://github.com" : endpointDefaults.baseUrl.replace("/api/v3", "");
+}
+async function oauthRequest(request, route, parameters) {
+  const withOAuthParameters = {
+    baseUrl: requestToOAuthBaseUrl(request),
+    headers: {
+      accept: "application/json"
+    },
+    ...parameters
+  };
+  const response = await request(route, withOAuthParameters);
+  if ("error" in response.data) {
+    const error = new RequestError(
+      `${response.data.error_description} (${response.data.error}, ${response.data.error_uri})`,
+      400,
+      {
+        request: request.endpoint.merge(
+          route,
+          withOAuthParameters
+        )
+      }
+    );
+    error.response = response;
+    throw error;
+  }
+  return response;
+}
+export {
+  oauthRequest,
+  requestToOAuthBaseUrl
+};

package/dist-src/version.js

@@ -0,0 +1,4 @@
+const VERSION = "6.0.2";
+export {
+  VERSION
+};

package/dist-types/check-token.d.ts

@@ -0,0 +1,24 @@
+import type { RequestInterface, Endpoints } from "@octokit/types";
+import type { OAuthAppAuthentication, GitHubAppAuthenticationWithExpirationEnabled, GitHubAppAuthenticationWithExpirationDisabled } from "./types.js";
+export type CheckTokenOAuthAppOptions = {
+    clientType: "oauth-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+    request?: RequestInterface;
+};
+export type CheckTokenGitHubAppOptions = {
+    clientType: "github-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+    request?: RequestInterface;
+};
+export type CheckTokenOAuthAppResponse = Endpoints["POST /applications/{client_id}/token"]["response"] & {
+    authentication: OAuthAppAuthentication;
+};
+export type CheckTokenGitHubAppResponse = Endpoints["POST /applications/{client_id}/token"]["response"] & {
+    authentication: GitHubAppAuthenticationWithExpirationEnabled | GitHubAppAuthenticationWithExpirationDisabled;
+};
+export declare function checkToken(options: CheckTokenOAuthAppOptions): Promise<CheckTokenOAuthAppResponse>;
+export declare function checkToken(options: CheckTokenGitHubAppOptions): Promise<CheckTokenGitHubAppResponse>;

package/dist-types/create-device-code.d.ts

@@ -0,0 +1,20 @@
+import type { OctokitResponse, RequestInterface } from "@octokit/types";
+export type CreateDeviceCodeOAuthAppOptions = {
+    clientType: "oauth-app";
+    clientId: string;
+    scopes?: string[];
+    request?: RequestInterface;
+};
+export type CreateDeviceCodeGitHubAppOptions = {
+    clientType: "github-app";
+    clientId: string;
+    request?: RequestInterface;
+};
+export type CreateDeviceCodeDeviceTokenResponse = OctokitResponse<{
+    device_code: string;
+    user_code: string;
+    verification_uri: string;
+    expires_in: number;
+    interval: number;
+}>;
+export declare function createDeviceCode(options: CreateDeviceCodeOAuthAppOptions | CreateDeviceCodeGitHubAppOptions): Promise<CreateDeviceCodeDeviceTokenResponse>;

package/dist-types/delete-authorization.d.ts

@@ -0,0 +1,18 @@
+import type { RequestInterface, Endpoints } from "@octokit/types";
+export type DeleteAuthorizationOAuthAppOptions = {
+    clientType: "oauth-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+    request?: RequestInterface;
+};
+export type DeleteAuthorizationGitHubAppOptions = {
+    clientType: "github-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+    request?: RequestInterface;
+};
+export type DeleteAuthorizationResponse = Endpoints["DELETE /applications/{client_id}/grant"]["response"];
+export declare function deleteAuthorization(options: DeleteAuthorizationOAuthAppOptions): Promise<DeleteAuthorizationResponse>;
+export declare function deleteAuthorization(options: DeleteAuthorizationGitHubAppOptions): Promise<DeleteAuthorizationResponse>;

package/dist-types/delete-token.d.ts

@@ -0,0 +1,18 @@
+import type { RequestInterface, Endpoints } from "@octokit/types";
+export type DeleteTokenOAuthAppOptions = {
+    clientType: "oauth-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+    request?: RequestInterface;
+};
+export type DeleteTokenGitHubAppOptions = {
+    clientType: "github-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+    request?: RequestInterface;
+};
+export type DeleteTokenResponse = Endpoints["DELETE /applications/{client_id}/token"]["response"];
+export declare function deleteToken(options: DeleteTokenOAuthAppOptions): Promise<DeleteTokenResponse>;
+export declare function deleteToken(options: DeleteTokenGitHubAppOptions): Promise<DeleteTokenResponse>;

package/dist-types/exchange-device-code.d.ts

@@ -0,0 +1,57 @@
+import type { OctokitResponse, RequestInterface } from "@octokit/types";
+import type { OAuthAppAuthentication, GitHubAppAuthenticationWithExpirationEnabled, GitHubAppAuthenticationWithExpirationDisabled, GitHubAppAuthenticationWithRefreshToken, OAuthAppCreateTokenResponseData, GitHubAppCreateTokenResponseData, GitHubAppCreateTokenWithExpirationResponseData } from "./types.js";
+export type ExchangeDeviceCodeOAuthAppOptionsWithoutClientSecret = {
+    clientType: "oauth-app";
+    clientId: string;
+    code: string;
+    redirectUrl?: string;
+    state?: string;
+    request?: RequestInterface;
+    scopes?: string[];
+};
+export type ExchangeDeviceCodeOAuthAppOptions = ExchangeDeviceCodeOAuthAppOptionsWithoutClientSecret & {
+    clientSecret: string;
+};
+export type ExchangeDeviceCodeGitHubAppOptionsWithoutClientSecret = {
+    clientType: "github-app";
+    clientId: string;
+    code: string;
+    redirectUrl?: string;
+    state?: string;
+    request?: RequestInterface;
+};
+export type ExchangeDeviceCodeGitHubAppOptions = ExchangeDeviceCodeGitHubAppOptionsWithoutClientSecret & {
+    clientSecret: string;
+};
+type OAuthAppAuthenticationWithoutClientSecret = Omit<OAuthAppAuthentication, "clientSecret">;
+type GitHubAppAuthenticationWithoutClientSecret = Omit<GitHubAppAuthenticationWithExpirationEnabled | GitHubAppAuthenticationWithExpirationDisabled, "clientSecret">;
+type GitHubAppAuthenticationWithExpirationWithoutClientSecret = Omit<GitHubAppAuthenticationWithRefreshToken, "clientSecret">;
+export type ExchangeDeviceCodeOAuthAppResponse = OctokitResponse<OAuthAppCreateTokenResponseData> & {
+    authentication: OAuthAppAuthentication;
+};
+export type ExchangeDeviceCodeOAuthAppResponseWithoutClientSecret = OctokitResponse<OAuthAppCreateTokenResponseData> & {
+    authentication: OAuthAppAuthenticationWithoutClientSecret;
+};
+export type ExchangeDeviceCodeGitHubAppResponse = OctokitResponse<GitHubAppCreateTokenResponseData | GitHubAppCreateTokenWithExpirationResponseData> & {
+    authentication: GitHubAppAuthenticationWithExpirationEnabled | GitHubAppAuthenticationWithExpirationDisabled | GitHubAppAuthenticationWithRefreshToken;
+};
+export type ExchangeDeviceCodeGitHubAppResponseWithoutClientSecret = OctokitResponse<GitHubAppCreateTokenResponseData | GitHubAppCreateTokenWithExpirationResponseData> & {
+    authentication: GitHubAppAuthenticationWithoutClientSecret | GitHubAppAuthenticationWithExpirationWithoutClientSecret;
+};
+/**
+ * Exchange the code from GitHub's OAuth Web flow for OAuth Apps.
+ */
+export declare function exchangeDeviceCode(options: ExchangeDeviceCodeOAuthAppOptions): Promise<ExchangeDeviceCodeOAuthAppResponse>;
+/**
+ * Exchange the code from GitHub's OAuth Web flow for OAuth Apps without clientSecret
+ */
+export declare function exchangeDeviceCode(options: ExchangeDeviceCodeOAuthAppOptionsWithoutClientSecret): Promise<ExchangeDeviceCodeOAuthAppResponseWithoutClientSecret>;
+/**
+ * Exchange the code from GitHub's OAuth Web flow for GitHub Apps. `scopes` are not supported by GitHub Apps.
+ */
+export declare function exchangeDeviceCode(options: ExchangeDeviceCodeGitHubAppOptions): Promise<ExchangeDeviceCodeGitHubAppResponse>;
+/**
+ * Exchange the code from GitHub's OAuth Web flow for GitHub Apps without using `clientSecret`. `scopes` are not supported by GitHub Apps.
+ */
+export declare function exchangeDeviceCode(options: ExchangeDeviceCodeGitHubAppOptionsWithoutClientSecret): Promise<ExchangeDeviceCodeGitHubAppResponseWithoutClientSecret>;
+export {};

package/dist-types/exchange-web-flow-code.d.ts

@@ -0,0 +1,32 @@
+import type { OctokitResponse, RequestInterface } from "@octokit/types";
+import type { OAuthAppAuthentication, GitHubAppAuthenticationWithExpirationEnabled, GitHubAppAuthenticationWithExpirationDisabled, GitHubAppAuthenticationWithRefreshToken, OAuthAppCreateTokenResponseData, GitHubAppCreateTokenResponseData, GitHubAppCreateTokenWithExpirationResponseData } from "./types.js";
+export type ExchangeWebFlowCodeOAuthAppOptions = {
+    clientType: "oauth-app";
+    clientId: string;
+    clientSecret: string;
+    code: string;
+    redirectUrl?: string;
+    request?: RequestInterface;
+};
+export type ExchangeWebFlowCodeGitHubAppOptions = {
+    clientType: "github-app";
+    clientId: string;
+    clientSecret: string;
+    code: string;
+    redirectUrl?: string;
+    request?: RequestInterface;
+};
+export type ExchangeWebFlowCodeOAuthAppResponse = OctokitResponse<OAuthAppCreateTokenResponseData> & {
+    authentication: OAuthAppAuthentication;
+};
+export type ExchangeWebFlowCodeGitHubAppResponse = OctokitResponse<GitHubAppCreateTokenResponseData | GitHubAppCreateTokenWithExpirationResponseData> & {
+    authentication: GitHubAppAuthenticationWithExpirationEnabled | GitHubAppAuthenticationWithExpirationDisabled | GitHubAppAuthenticationWithRefreshToken;
+};
+/**
+ * Exchange the code from GitHub's OAuth Web flow for OAuth Apps.
+ */
+export declare function exchangeWebFlowCode(options: ExchangeWebFlowCodeOAuthAppOptions): Promise<ExchangeWebFlowCodeOAuthAppResponse>;
+/**
+ * Exchange the code from GitHub's OAuth Web flow for GitHub Apps. Note that `scopes` are not supported by GitHub Apps.
+ */
+export declare function exchangeWebFlowCode(options: ExchangeWebFlowCodeGitHubAppOptions): Promise<ExchangeWebFlowCodeGitHubAppResponse>;

package/dist-types/get-web-flow-authorization-url.d.ts

@@ -0,0 +1,25 @@
+import type { OAuthAppResult, GitHubAppResult } from "@octokit/oauth-authorization-url";
+import type { RequestInterface } from "@octokit/types";
+export type GetWebFlowAuthorizationUrlOAuthAppOptions = {
+    clientType: "oauth-app";
+    clientId: string;
+    allowSignup?: boolean;
+    login?: string;
+    scopes?: string | string[];
+    redirectUrl?: string;
+    state?: string;
+    request?: RequestInterface;
+};
+export type GetWebFlowAuthorizationUrlGitHubAppOptions = {
+    clientType: "github-app";
+    clientId: string;
+    allowSignup?: boolean;
+    login?: string;
+    redirectUrl?: string;
+    state?: string;
+    request?: RequestInterface;
+};
+export type GetWebFlowAuthorizationUrlOAuthAppResult = OAuthAppResult;
+export type GetWebFlowAuthorizationUrlGitHubAppResult = GitHubAppResult;
+export declare function getWebFlowAuthorizationUrl(options: GetWebFlowAuthorizationUrlOAuthAppOptions): OAuthAppResult;
+export declare function getWebFlowAuthorizationUrl(options: GetWebFlowAuthorizationUrlGitHubAppOptions): GitHubAppResult;

package/dist-types/index.d.ts

@@ -0,0 +1,12 @@
+export { VERSION } from "./version.js";
+export * from "./get-web-flow-authorization-url.js";
+export * from "./exchange-web-flow-code.js";
+export * from "./create-device-code.js";
+export * from "./exchange-device-code.js";
+export * from "./check-token.js";
+export * from "./refresh-token.js";
+export * from "./scope-token.js";
+export * from "./reset-token.js";
+export * from "./delete-token.js";
+export * from "./delete-authorization.js";
+export type { OAuthAppAuthentication, GitHubAppAuthenticationWithExpirationDisabled, GitHubAppAuthenticationWithExpirationEnabled, GitHubAppAuthenticationWithRefreshToken, GitHubAppAuthentication, GitHubAppAuthenticationWithExpiration, } from "./types.js";

package/dist-types/refresh-token.d.ts

@@ -0,0 +1,13 @@
+import type { OctokitResponse, RequestInterface } from "@octokit/types";
+import type { GitHubAppAuthenticationWithRefreshToken, GitHubAppCreateTokenWithExpirationResponseData } from "./types.js";
+export type RefreshTokenOptions = {
+    clientType: "github-app";
+    clientId: string;
+    clientSecret: string;
+    refreshToken: string;
+    request?: RequestInterface;
+};
+export type RefreshTokenResponse = OctokitResponse<GitHubAppCreateTokenWithExpirationResponseData> & {
+    authentication: GitHubAppAuthenticationWithRefreshToken;
+};
+export declare function refreshToken(options: RefreshTokenOptions): Promise<RefreshTokenResponse>;

package/dist-types/reset-token.d.ts

@@ -0,0 +1,24 @@
+import type { Endpoints, RequestInterface } from "@octokit/types";
+import type { OAuthAppAuthentication, GitHubAppAuthenticationWithExpirationEnabled, GitHubAppAuthenticationWithExpirationDisabled } from "./types.js";
+export type ResetTokenOAuthAppOptions = {
+    clientType: "oauth-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+    request?: RequestInterface;
+};
+export type ResetTokenGitHubAppOptions = {
+    clientType: "github-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+    request?: RequestInterface;
+};
+export type ResetTokenOAuthAppResponse = Endpoints["PATCH /applications/{client_id}/token"]["response"] & {
+    authentication: OAuthAppAuthentication;
+};
+export type ResetTokenGitHubAppResponse = Endpoints["PATCH /applications/{client_id}/token"]["response"] & {
+    authentication: GitHubAppAuthenticationWithExpirationEnabled | GitHubAppAuthenticationWithExpirationDisabled;
+};
+export declare function resetToken(options: ResetTokenOAuthAppOptions): Promise<ResetTokenOAuthAppResponse>;
+export declare function resetToken(options: ResetTokenGitHubAppOptions): Promise<ResetTokenGitHubAppResponse>;

package/dist-types/scope-token.d.ts

@@ -0,0 +1,29 @@
+import type { RequestInterface, Endpoints } from "@octokit/types";
+import type { GitHubAppAuthenticationWithExpirationEnabled, GitHubAppAuthenticationWithExpirationDisabled } from "./types.js";
+type CommonOptions = {
+    clientType: "github-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+    permissions?: Endpoint["parameters"]["permissions"];
+    request?: RequestInterface;
+};
+type TargetOption = {
+    target: string;
+};
+type TargetIdOption = {
+    target_id: number;
+};
+type RepositoriesOption = {
+    repositories?: string[];
+};
+type RepositoryIdsOption = {
+    repository_ids?: number[];
+};
+type Endpoint = Endpoints["POST /applications/{client_id}/token/scoped"];
+export type ScopeTokenOptions = (CommonOptions & TargetOption & RepositoriesOption) | (CommonOptions & TargetIdOption & RepositoriesOption) | (CommonOptions & TargetOption & RepositoryIdsOption) | (CommonOptions & TargetIdOption & RepositoryIdsOption);
+export type ScopeTokenResponse = Endpoint["response"] & {
+    authentication: GitHubAppAuthenticationWithExpirationEnabled | GitHubAppAuthenticationWithExpirationDisabled;
+};
+export declare function scopeToken(options: ScopeTokenOptions): Promise<ScopeTokenResponse>;
+export {};

package/dist-types/types.d.ts

@@ -0,0 +1,58 @@
+export type OAuthAppAuthentication = {
+    clientType: "oauth-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+    scopes: string[];
+};
+export type GitHubAppAuthenticationWithExpirationDisabled = {
+    clientType: "github-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+};
+export type GitHubAppAuthenticationWithExpirationEnabled = GitHubAppAuthenticationWithExpirationDisabled & {
+    expiresAt: string;
+};
+export type GitHubAppAuthenticationWithRefreshToken = GitHubAppAuthenticationWithExpirationEnabled & {
+    refreshToken: string;
+    refreshTokenExpiresAt: string;
+};
+/**
+ * @deprecated Use `GitHubAppAuthenticationWithExpirationDisabled` or
+ * `GitHubAppAuthenticationWithExpirationEnabled` instead.
+ */
+export type GitHubAppAuthentication = {
+    clientType: "github-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+};
+/**
+ * @deprecated Use `GitHubAppAuthenticationWithRefreshToken` instead.
+ */
+export type GitHubAppAuthenticationWithExpiration = {
+    clientType: "github-app";
+    clientId: string;
+    clientSecret: string;
+    token: string;
+    refreshToken: string;
+    expiresAt: string;
+    refreshTokenExpiresAt: string;
+};
+export type OAuthAppCreateTokenResponseData = {
+    access_token: string;
+    scope: string;
+    token_type: "bearer";
+};
+export type GitHubAppCreateTokenResponseData = {
+    access_token: string;
+    token_type: "bearer";
+};
+export type GitHubAppCreateTokenWithExpirationResponseData = {
+    access_token: string;
+    token_type: "bearer";
+    expires_in: number;
+    refresh_token: string;
+    refresh_token_expires_in: number;
+};

package/dist-types/utils.d.ts

@@ -0,0 +1,3 @@
+import type { RequestInterface } from "@octokit/types";
+export declare function requestToOAuthBaseUrl(request: RequestInterface): string;
+export declare function oauthRequest(request: RequestInterface, route: string, parameters: Record<string, unknown>): Promise<import("@octokit/types").OctokitResponse<any, number>>;

package/dist-types/version.d.ts

@@ -0,0 +1 @@
+export declare const VERSION = "6.0.2";

package/package.json

@@ -0,0 +1,73 @@
+{
+  "name": "@depup/octokit__oauth-methods",
+  "type": "module",
+  "version": "6.0.2-depup.0",
+  "description": "[DepUp] Set of stateless request methods to create, check, reset, refresh, and delete user access tokens for OAuth and GitHub Apps",
+  "repository": "https://github.com/octokit/oauth-methods.js",
+  "keywords": [
+    "depup",
+    "dependency-bumped",
+    "updated-deps",
+    "@octokit/oauth-methods",
+    "github",
+    "api",
+    "sdk",
+    "toolkit",
+    "oauth"
+  ],
+  "author": "Gregor Martynus (https://dev.to/gr2m)",
+  "license": "MIT",
+  "dependencies": {
+    "@octokit/oauth-authorization-url": "^8.0.0",
+    "@octokit/request": "^10.0.8",
+    "@octokit/request-error": "^7.1.0",
+    "@octokit/types": "^16.0.0"
+  },
+  "devDependencies": {
+    "@octokit/tsconfig": "^4.0.0",
+    "@types/node": "^24.0.0",
+    "@vitest/coverage-v8": "^3.0.0",
+    "esbuild": "^0.25.0",
+    "fetch-mock": "^11.0.0",
+    "glob": "^11.0.0",
+    "prettier": "3.5.3",
+    "semantic-release-plugin-update-version-in-files": "^2.0.0",
+    "typescript": "^5.0.0",
+    "vitest": "^3.0.0"
+  },
+  "engines": {
+    "node": ">= 20"
+  },
+  "files": [
+    "dist-*/**",
+    "bin/**",
+    "changes.json",
+    "README.md"
+  ],
+  "types": "./dist-types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist-types/index.d.ts",
+      "import": "./dist-bundle/index.js",
+      "default": "./dist-bundle/index.js"
+    }
+  },
+  "sideEffects": false,
+  "depup": {
+    "changes": {
+      "@octokit/request": {
+        "from": "^10.0.6",
+        "to": "^10.0.8"
+      },
+      "@octokit/request-error": {
+        "from": "^7.0.2",
+        "to": "^7.1.0"
+      }
+    },
+    "depsUpdated": 2,
+    "originalPackage": "@octokit/oauth-methods",
+    "originalVersion": "6.0.2",
+    "processedAt": "2026-03-17T16:33:33.969Z",
+    "smokeTest": "passed"
+  }
+}